Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.cer
File:                     AD5387D9495868D8BE3A9449C0A4182442615CAA.cer (raw, json)
Hash identifier:          Ct5/9av3bNH5b3vFxh6fMBi67XUE1Trm8e9q8AuKrG0=
Subject key identifier:   AD:53:87:D9:49:58:68:D8:BE:3A:94:49:C0:A4:18:24:42:61:5C:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       319D3A63F5FF23B3E21D3AD839B75336BD0E4DA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 16:22:36 +0000
Certificate not after:    Thu 20 Feb 2025 16:27:36 +0000
Subordinate resources:    AS: 271626
                          IP: 181.189.80.0/22
                          IP: 2804:7e78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9d:3a:63:f5:ff:23:b3:e2:1d:3a:d8:39:b7:53:36:bd:0e:4d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 16:22:36 2024 GMT
            Not After : Feb 20 16:27:36 2025 GMT
        Subject: CN=AD5387D9495868D8BE3A9449C0A4182442615CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:3b:2a:3b:91:7f:97:42:8d:84:71:4b:ba:
                    10:ed:ea:80:a1:b4:bd:f9:4c:86:6a:d7:21:2c:f6:
                    d8:72:cd:19:df:a6:f6:64:da:67:0b:da:86:9d:7f:
                    a8:dc:9c:3b:fd:cb:62:e2:26:8d:b2:74:7b:c0:fe:
                    cc:9d:44:a8:e3:29:6d:d1:96:86:82:42:fe:a5:9f:
                    08:b5:78:ca:92:55:09:68:2f:34:2f:49:a2:e2:d8:
                    6b:8c:77:92:74:4a:3d:cc:46:ea:79:16:02:46:91:
                    15:93:bf:3d:1f:fa:39:9c:85:8d:44:46:93:33:51:
                    b0:c4:f6:fd:43:e3:17:18:b8:58:28:47:9e:b7:8d:
                    a2:4d:8d:5f:8a:55:2c:48:21:bb:11:e3:36:0f:82:
                    63:87:2a:43:2a:2b:c6:11:31:70:70:06:f1:8e:66:
                    e1:ad:0a:f9:8d:8c:e6:a4:ed:ae:17:4e:a0:74:28:
                    b3:09:ba:e6:e8:3d:69:74:07:8b:05:22:8a:fe:f8:
                    e6:19:e3:13:09:60:c5:46:08:e9:22:50:14:56:48:
                    00:a8:42:14:5c:02:49:d6:f4:34:33:23:49:1b:97:
                    e7:04:1c:78:d6:71:d2:43:d4:d0:b6:11:ee:44:24:
                    0e:c8:71:52:7b:38:40:2a:d0:d8:62:93:ea:27:7f:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:53:87:D9:49:58:68:D8:BE:3A:94:49:C0:A4:18:24:42:61:5C:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.80.0/22
                IPv6:
                  2804:7e78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271626

    Signature Algorithm: sha256WithRSAEncryption
         8a:67:9a:b5:3e:d1:31:8a:2c:cb:69:fa:36:da:40:cb:9f:88:
         50:bb:e2:11:dd:27:a2:62:9a:0d:29:4d:1e:52:9f:7d:00:6d:
         d7:6a:4f:98:ec:85:42:9e:d4:df:d9:3b:12:6b:38:18:34:c7:
         3d:a0:40:be:37:d1:e9:fd:39:a0:7e:55:db:38:03:44:49:3d:
         c4:ef:ce:ad:80:c6:5f:c9:53:be:61:5c:76:bd:fc:c8:d9:50:
         fa:ab:0f:a3:04:f9:58:40:4e:da:a5:d0:cf:90:4b:26:ef:68:
         d4:2d:f8:c5:ea:80:56:45:11:46:05:b8:4c:6b:f7:9b:08:f5:
         aa:4a:0b:6b:9a:9c:db:cd:eb:32:fb:de:f0:73:28:c5:3a:05:
         0c:68:c2:c7:e4:6d:b2:f5:f7:ac:46:8f:26:85:20:bf:b6:70:
         d9:0b:4b:71:ef:47:60:9e:90:ca:fd:2b:57:22:53:b6:ce:35:
         51:5a:97:75:2f:fb:b5:b5:02:d1:1b:cb:41:cf:87:61:57:f5:
         23:24:04:83:c7:78:39:5e:95:c4:38:c7:3b:d2:01:75:0f:59:
         d5:6e:9a:9f:73:a4:0d:01:1f:f0:00:df:49:ae:b4:b2:e1:1d:
         53:2c:e3:ba:a4:ed:4f:0c:11:f3:cb:72:7d:97:96:e5:aa:8c:
         63:01:bb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----